https://www.goodsignin.com/blog daily 0.75 2024-10-22 https://www.goodsignin.com/blog/passkeys-across-domains monthly 0.5 2024-10-22 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/20439b39-a53e-4a4d-baa4-05c3f95331ee/passkey-signin-options-object-rpid-arrow.png Learn Think Blog Repeat - Passkeys Across Domains - Public key credential request options object showing RPID parameter “goodsignin.com” Public key credential request options object showing rpId parameter “goodsignin.com” https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/18bdc885-3b23-47aa-acb8-634ae7d1c8db/metadata-app-goodsignin-com.png Learn Think Blog Repeat - Passkeys Across Domains - Make it stand out Related origins for app.goodsignin.com https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/65c685c6-f1b7-4cc7-817d-ca28847cbfc3/single-domain-app-arrow-origin.PNG Learn Think Blog Repeat - Passkeys Across Domains - Webauthn sample web app with web origin app.goodsignin.com Webauthn sample web app with web origin app.goodsignin.com https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/1729541289334-JQAK4W0PZYHO46G2EIXQ/signin-passkey-39008.png Learn Think Blog Repeat - Passkeys Across Domains https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/1729541306640-1GAXJC9HK968IRI3UGNL/signin-passkey-23887.png Learn Think Blog Repeat - Passkeys Across Domains https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/4bfd3e60-b5f8-4a47-89a4-caf1956aeacf/createobject-rpid-domain-suffix-arrow.PNG Learn Think Blog Repeat - Passkeys Across Domains - Public key credential creation options object showing RPID parameter “goodsignin.com” Public key credential creation options object showing rpid parameter “goodsignin.com” https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/1f3e3453-d656-444b-a324-676ae5d7950c/rpid-passkey-hello-suffix-arrow.PNG Learn Think Blog Repeat - Passkeys Across Domains - Windows Hello passkey for RPID goodsignin.com Windows Hello passkey for rpid goodsignin.com https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/86d2dead-7977-43bd-be7c-771ebe394d85/funwith-app.png Learn Think Blog Repeat - Passkeys Across Domains - Webauthn sample web app with web funwithwebauthn.azurewebsites.net Webauthn sample web app with web funwithwebauthn.azurewebsites.net https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/d7f6ecfd-4295-4e1a-b6bf-a70673c33d48/createobject-rpid-azurewebsites-arrow.PNG Learn Think Blog Repeat - Passkeys Across Domains - Public key credential creation options object showing RPID parameter “azurewebsites.net” Public key credential creation options object showing rpid parameter “azurewebsites.net” https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/7d9e02b2-28d4-4c8c-ae3b-b8b9fd8a2f47/single-domain-passkey-hello-arrow-rpid.PNG Learn Think Blog Repeat - Passkeys Across Domains - Windows Hello passkey for RPID app.goodsignin.com Windows Hello passkey for rpid app.goodsignin.com https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/0d945b82-e7a5-4f64-bc89-f274ccb78228/use-passkey-local.png Learn Think Blog Repeat - Passkeys Across Domains - Passkey signin prompt in Chrome browser for local Windows Hello credential Passkey signin prompt in Chrome browser for local Windows Hello credential https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/85d077e7-0fc5-42ee-887a-896784d635cb/error-securityerror-azurewebsites.png Learn Think Blog Repeat - Passkeys Across Domains - Make it stand out Webauthn client returns a SecurityError in response to RPID azurewebsites.net https://www.goodsignin.com/blog/tofu-and-provenance monthly 0.5 2024-10-06 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/43475646-929b-45c4-b13f-23913468c4b6/js-parse-attestation-object-ybk.png Learn Think Blog Repeat - In a multi-device passkey world, what can we know about a key? - Make it stand out Example javascript code snippets to parse attestation object of fmt ‘packed’ https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/2b7c8b0a-1d8c-461c-8864-15a18115e14e/image.png Learn Think Blog Repeat - In a multi-device passkey world, what can we know about a key? - Make it stand out Attestation object showing the fmt, attStmt, and authData properties https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/9ac325ee-e8ef-4a49-bdc3-7d7a43027245/js-parse-attestation-object-tpm.png Learn Think Blog Repeat - In a multi-device passkey world, what can we know about a key? - Make it stand out Example javascript code snippets to parse attestation object of fmt ‘tpm’ https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/fdc325d4-f148-495e-960c-8ba671b6cb0b/image-attStmt-alg-ybk.png Learn Think Blog Repeat - In a multi-device passkey world, what can we know about a key? - Make it stand out Attestation statement properties, showing the COSE algorithm identifier for ECDSA with SHA256 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/c31379fd-66cd-493e-8a1a-754e53be75a1/unsplash-image-vL-R502ZxuM.jpg Learn Think Blog Repeat - In a multi-device passkey world, what can we know about a key? - a quick aside: the definition of provenance For this conversation we’re going to learn a new word: provenance. Its etymology is Latin via French, or perhaps some Greek, with prefix “pro” meaning “before” (give or take), and root “venir” meaning “to come”. So…“to come before”? Give or take. In its first sense, provenance is a more grandiose way of saying “source or origin”. In its second sense, provenance means “the history of ownership of a valued object or work of art or literature”, a chain of custody for the art world. https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/604ab59e-bd15-42af-8aed-ef93c4fe6eb3/image-attStmt-alg.png Learn Think Blog Repeat - In a multi-device passkey world, what can we know about a key? - Make it stand out Attestation statement properties, showing the COSE algorithm identifier for RSA with SHA1 https://www.goodsignin.com/blog/how-it-started-how-its-going monthly 0.5 2024-10-06 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/7ad9139c-6851-4821-96da-e1a4d90142bd/identity-spec.jpeg Learn Think Blog Repeat - How it started, how it’s going - Make it stand out My initial “spec” for the “Identity Project” https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/bfe773c6-3a5f-4ebf-9223-97a1e1a76274/funwith-2.jpg Learn Think Blog Repeat - How it started, how it’s going - Make it stand out Today https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/c01151fe-7aa3-4091-9d42-b46ad75ea908/hello-world.jpg Learn Think Blog Repeat - How it started, how it’s going - Make it stand out Hello, world. https://www.goodsignin.com/blog/these-are-not-edge-cases monthly 0.5 2024-09-18 https://www.goodsignin.com/blog/lets-all-get-more-familiar-with-password-autofill monthly 0.5 2024-10-06 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/f142c2cd-e674-4378-93bc-27dab46745ce/funwith-login-mac.png Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - WebAuthn sample app with conditional mediation support in Safari on iPhone https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/404da12c-9272-4eef-a72a-5d99ce0e3bd2/autofill_menu.jpg Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - Chrome browser password autofill menu on amazon.com site Chrome browser password autofill menu on amazon.com site https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/f4dabc09-8d5a-46d5-b050-56ff6b4bbc2f/nytimes-safari.png Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - Simple username and password autofill in Safari on iPhone Simple username and password autofill in Safari on iPhone https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/c9d2ac49-1c76-4a48-ad32-0ee3348bda09/nyt-other-options.jpg Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - Safari on iPhone other password options https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/d6227094-d1da-4343-9f81-66c7b209526e/google_save_google.jpg Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - Save to Google account https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/8888c1a6-4ccb-40f6-90e1-00a0e54c84af/nyt-used-saved-pwd.jpg Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - Safari on iPhone prompt to use a saved username and password https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/b3256487-ab56-4372-b9fa-2654b5ce36a2/google_save_local.jpg Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - Save password locally in Google password manager https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/cd3a3569-2b20-423b-a2cc-6f72dc67bb84/chrome-save-password-simple.jpg Learn Think Blog Repeat - Let’s all get [more] familiar with password autofill - Chrome browser prompt to save password https://www.goodsignin.com/blog/what-does-cable-have-to-do-with-passkeys monthly 0.5 2024-10-06 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/920776fb-6e73-4468-8a38-4dc499607b2b/add-android-qr-capture.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/4e3c5176-4c0a-4fc2-8091-22d48c31619c/qr-pairing-video-image.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/e66c4231-41bb-48b9-b5f4-c8ce97b99d76/add-android-qr-dinosaur.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/14fcac68-9c29-41f4-9416-dc0c11fa0496/ios-save-passkey.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/018d5e3c-2c9d-41e0-91f0-8dba338f3c58/add-new-android-phone.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/5a923ec3-839e-4703-88f6-9b1f560d34fa/ios-settings-sync.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out On my Surface Laptop running Windows 10, this example uses Chrome version 104.0.5112.102 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/17307bcb-675e-4e01-aa18-155598731619/ios-signin-passkey.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/32510096-ffc8-4ca9-b1b6-31d736b67343/responseTransports.png Learn Think Blog Repeat - What does CABLE have to do with passkeys? - Make it stand out Whatever it is, the way you tell your story online can make all the difference. https://www.goodsignin.com/blog/more-about-passkeys monthly 0.5 2024-10-06 https://www.goodsignin.com/blog/challenging-times monthly 0.5 2024-10-06 https://www.goodsignin.com/blog/about-the-new-fido-announcements monthly 0.5 2024-10-06 https://www.goodsignin.com/blog/a-bazillion-keys monthly 0.5 2024-10-06 https://www.goodsignin.com/blog/webauthn-for-pki-professionals monthly 0.5 2024-10-18 https://www.goodsignin.com/blog/consent-culture monthly 0.5 2024-10-06 https://www.goodsignin.com/blog/the-factors-we-choose monthly 0.5 2024-10-06 https://www.goodsignin.com/blog/the-principles-of-good-auth monthly 0.5 2024-10-06 https://www.goodsignin.com/blog/why-auth monthly 0.5 2024-09-19 https://www.goodsignin.com/blog/introduction monthly 0.5 2024-09-19 https://www.goodsignin.com/blog/category/passkeys monthly 0.5 https://www.goodsignin.com/blog/category/basics monthly 0.5 https://www.goodsignin.com/blog/category/cross-domain monthly 0.5 https://www.goodsignin.com/blog/category/attestation monthly 0.5 https://www.goodsignin.com/blog/category/consent monthly 0.5 https://www.goodsignin.com/blog/category/pki monthly 0.5 https://www.goodsignin.com/blog/category/intro monthly 0.5 https://www.goodsignin.com/blog/category/intermediate monthly 0.5 https://www.goodsignin.com/blog/category/webauthn monthly 0.5 https://www.goodsignin.com/blog/category/identity-nerd monthly 0.5 https://www.goodsignin.com/blog/category/loops+and+things monthly 0.5 https://www.goodsignin.com/blog/category/deployment monthly 0.5 https://www.goodsignin.com/blog/category/architecture monthly 0.5 https://www.goodsignin.com/blog/tag/beginner monthly 0.5 https://www.goodsignin.com/blog/tag/intermediate monthly 0.5 https://www.goodsignin.com/blog/tag/identity-nerd monthly 0.5 https://www.goodsignin.com/contact daily 0.75 2024-09-20 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/d6a8d842-bd12-4f0c-b17b-0b83a0db09b9/unsplash-image-q-oNVNeMhVs.jpg https://www.goodsignin.com/home daily 1.0 2024-11-21 https://images.squarespace-cdn.com/content/v1/66e314a4562d2475bb80374c/1729710984942-A3ELN1CAVYUBWVY9EROY/GettyImages-1390481905.jpg https://www.goodsignin.com/projects daily 0.75 2024-10-26 https://www.goodsignin.com/about daily 0.75 2024-09-20